For a brief time they introduced a comical URL switch issue. They wanted all things that contained twitter.com to be shown as x.com. But they did that terribly. So if someone registered a domain like for example “netflitwitter.com” and put a fake Netflix login page on it, then posted a tweet with their link, it would be displayed as netflix.com but redirect you to the phishing site